← Facebook

2025 Infostealer credential dump — 16B+

2025 16.0B records affected Share on X

Data compromised

Passwords, Session tokens, Session cookies

Technical writeup

Aggregation of Stealer Logs published. Data stolen from users browsers (cookies/saved passwords) using Lumma/RedLine malware. Facebook logins were a primary target, enabling widespread session hijacking.

Root cause

Lumma/RedLine infostealer malware; credential theft from browsers.

References